Network Planning for Large Properties in Zanzibar: Resorts, Estates and Campuses
A site with several buildings needs a fibre backbone in ducts from one core room to a cabinet in each building, a UPS in every cabinet and separate networks for each system. Plan it before landscaping, and it works on day one and grows without being dug up again.
In each building, a fibre patch cord runs from the panel to an SFP module in the switch. Both ends must match the fibre type.
Expected result: The building switch links to the core at full speed.
{-- Knowledge Center device illustration (sfp). Part names and centres: App\Support\KnowledgeGuide::Devices. --}
TXRXSFP 10G-LRMatch fibre type and wavelength
From the building switch, copper cable runs under 100 metres to rooms, access points and cameras, with PoE power.
Expected result: Each building is a small, self-contained network fed by the backbone.
Where a road or heritage wall blocks a duct, a point-to-point wireless link with clear line of sight joins the building.
Expected result: The gatehouse or outbuilding joins the network without digging.
Line of sightPoEMain buildingLink radio ALink radio BGatehouse switchGate camera
Each building cabinet has a UPS and surge protection, not just the core room.
Expected result: During a cut, every building stays connected instead of breaking into islands.
{-- Knowledge Center device illustration (ups). Part names and centres: App\Support\KnowledgeGuide::Devices. --}
ON LINEREAROne per cabinet
A second fibre path closes the star into a ring. Switches run loop protection so only one path carries traffic at a time.
Expected result: If one fibre is cut, traffic takes the other way round in seconds.
CutTakes overCoreBuilding ABuilding BBuilding C
Troubleshooting
Common problems and how to fix them
1 Switches at both ends fail after storms
Likely cause Copper cable between buildings carrying surges.
Solution Replace the link with non-metallic fibre and add surge protection.
2 No link on a new fibre run
Likely cause SFP modules do not match the fibre type, wavelength or connector.
Solution Check both modules against the fibre and replace mismatched ones.
3 Whole network stops after adding a second fibre
Likely cause A ring without loop protection created a network loop.
Solution Unplug the second link and configure loop protection on the switches first.
4 Buildings go offline in every power cut
Likely cause UPS only in the core room.
Solution Fit a UPS in every cabinet with active equipment.
5 Outdoor Wi-Fi patchy across the estate
Likely cause Wireless mesh hops or too few outdoor access points.
Solution Wire outdoor access points to building switches after a coverage survey.
6 Nobody knows which fibre goes where
Likely cause No labels or fibre map.
Solution Label both ends and keep a fibre map and network diagram.
In Depth
In Depth
A site with several buildings needs a fibre backbone in ducts from one core room to a cabinet in each building, a UPS in every cabinet and separate networks for each system. Plan it before landscaping, and it works on day one and grows without being dug up again.
This guide is for developers, owners and facility managers of resorts, residential estates, compounds, school and college campuses, hospitals and warehouses in Zanzibar. A single building can often get by with one switch cabinet and a few access points. Spread the same needs across a site, and distance, the ground between buildings, lightning and the number of systems sharing the network all change the design.
What makes large sites different
Distance. Twisted-pair Ethernet (Cat5e, Cat6 and similar) is limited to 100 metres per channel, including patch leads: at most 90 metres of fixed cable plus the cords at each end. Beyond that you need fibre, a wireless link or an intermediate switch. Our comparison of fibre optic and Ethernet explains the trade-offs.
Lightning and earth differences. Copper cable between buildings can carry surges from nearby lightning, and buildings on separate supplies can sit at different earth potentials. Both destroy switch ports at either end. A non-metallic fibre cable carries light, not electricity, and breaks that path. If you use armoured fibre with metal parts, the armour must be earthed correctly.
Salt air, sun and rain. Near the coast, outdoor cabinets, cameras, access points and joints corrode and overheat. Specify outdoor-rated, sealed equipment, shaded or ventilated cabinets and stainless fixings.
Power. Buildings may have separate supplies, and cuts hit them at different moments. Every cabinet with active equipment needs its own UPS, or the network breaks into islands during a cut.
Ground conditions. Coral rock and sand affect trenching and duct depth. Plan routes early, ideally before landscaping and paving.
Many systems, one network. Guest or resident Wi-Fi, offices, CCTV, access control, intercoms, fire alarm interfaces, PA, smart controls and payments all share the backbone, and each must be kept apart.
Distance from support. Skilled technicians can be scarce outside town and spares often come from Dar es Salaam. Design for remote monitoring and keep spares on site.
The recommended design: a star of fibre from one core
A core room in a central, secure, cool location, holding the main router or firewall, core switch, recorders and servers on a properly sized UPS, with surge protection and earthing.
Fibre from the core to each building in underground ducts, ending on a fibre patch panel (ODF) at each end.
A distribution cabinet in each building with a managed switch (PoE if it powers cameras or access points), the fibre panel and a UPS. The fibre plugs into the switch through SFP modules or a media converter. Our explainer on what a network switch is covers SFP ports and PoE.
Copper from each cabinet to the rooms, cameras and access points in that building, within 100 metres.
Choosing the fibre. Single-mode fibre handles the longest distances and future speeds, and is the usual choice for outdoor and site backbones. Multimode is common inside buildings and can suit shorter runs: for example, common 10 Gbps multimode modules reach 300 metres on OM3 and 400 metres on OM4, while single-mode modules reach 10 km. Some designers lay hybrid cable with both types in the backbone. The SFP modules at both ends must match the fibre type, the wavelength and the connector. Install more cores than you need today: spare cores are cheap compared with digging the trench again.
Redundancy. For critical sites, a fibre ring lets traffic take the other way round if one cable is cut. A ring only works safely with switches that run a loop-protection protocol (such as Rapid Spanning Tree); without it, a ring creates a loop that takes the whole network down.
Ducts and pits
Use proper underground ducts with draw pits at bends and at intervals, so cables can be pulled later without digging.
Leave a spare duct or a draw rope in each run.
Mark duct routes on the site plan and record them before paving.
Wireless links where trenching is impossible
Where a road, a neighbour's land or a heritage wall blocks a trench, a point-to-point wireless link can join two buildings. It needs clear line of sight, solid outdoor mounting and surge protection. It is a good tool, but fibre is more reliable for the main backbone.
Outdoor Wi-Fi
Pools, gardens, beach areas, warehouse yards and estate roads need outdoor-rated access points on poles or walls, with weatherproof cabling. Coverage outdoors depends heavily on trees, walls and the shape of the site, so survey before buying. Avoid stretching wireless mesh across a whole estate: every wireless hop costs speed and reliability, as our mesh vs managed access points comparison explains. The business Wi-Fi design guide covers access point planning inside buildings.
Separation and management
VLANs for each system: residents or guests, staff, CCTV, access control, building systems, payments.
Central management of switches and access points, so one person can see and configure the whole site.
Monitoring and alerts when a switch, access point, camera or link goes down.
Documentation: cables labelled at both ends, a network diagram, a fibre map and an IP address plan. The IP subnet calculator helps plan address ranges.
Power over Ethernet
Cameras, access points and intercoms are usually powered over the network cable. Add up the power each switch must supply and leave headroom; the PoE budget calculator does the sums.
Real examples
These Extrion projects used the same building blocks:
Agwaya Residential: a residential property with LAN, fibre, CCTV, access control, smart and automated security, and fire and safety systems.
Kilimo warehouse, Malindi: LAN, fibre, CCTV, access and security, fire systems and PA in a warehouse setting.
Skills Lab Center, Lumumba: a training facility with LAN, fibre, CCTV, PA, fire and safety, and IT infrastructure.
Mnazi Mmoja Hospital buildings, including the Neuro Surgery Building and the OPB Hospital: LAN, fibre, CCTV, fire systems, PA and nurse call across a working hospital site.
Build it in phases
Phase 1: plan and lay the passive infrastructure. Site survey, network design and duct plan; ducts, pits and fibre to every building, including future ones; a core room with power, earthing, surge protection and a UPS. This phase is the hardest to change later, so do it during construction if you can.
Phase 2: core systems. Core and building switches, firewall and internet links with failover; Wi-Fi in buildings and key outdoor areas; CCTV at gates, perimeters and main buildings.
Phase 3: full site services. Access control, intercoms, PA and fire alarm interfaces; full outdoor Wi-Fi; a fibre ring for redundancy, monitoring and a spare-parts stock.
Planning checklist
Get an up-to-date site plan with all current and future buildings.
Choose a core room that can be kept cool, dry and secure.
Measure the distances; use fibre between separate buildings and for anything over 100 metres.
Plan duct routes and draw pits before landscaping or paving.
Specify more fibre cores than currently needed, and matching SFP modules.
Plan a UPS, earthing and surge protection for every cabinet.
List every system that will use the network and give each a VLAN.
Survey outdoor Wi-Fi before buying access points.
Specify outdoor-rated, sealed equipment and stainless fixings near the coast.
Arrange two internet connections on different technologies.
Calculate the PoE budget for each switch.
Label all cables and fibres, and keep a diagram and fibre map.
Set up monitoring and alerts.
Keep spare switches, access points, SFP modules and fibre patch leads on site.
Common mistakes we see
Copper between buildings. The most common cause of switches failing in storms.
Too few fibre cores. A cable with only enough for today means a new trench tomorrow.
No ducts. Cable buried directly cannot be replaced without digging.
Network planned after landscaping. Paving and gardens get dug up at great cost.
A fibre ring without loop protection. The "redundant" ring becomes a loop that stops everything.
Mismatched SFP modules. Single-mode optics on multimode fibre, or different wavelengths at each end, give no link.
No UPS in building cabinets. Each cut breaks the network into isolated pieces.
Everything on one flat network. A resident's infected laptop can reach the CCTV recorder or the gate controller.
Warning Trenching, working at height on poles and roofs, and work on mains power are hazardous. Fibre splicing produces tiny glass fragments that can injure eyes and skin, and fibre carries invisible laser light: never look into a connector. Leave these jobs to trained installers with proper safety equipment.
If you are developing or upgrading a resort, estate, campus or warehouse, Extrion can survey the site, design the backbone and install it. See our network architecture service or contact us.
This guide is general information. Procedures, product features and firmware change, so check your own equipment's documentation before you start.
FAQs
Frequently asked questions
When should we involve a network designer?
As early as possible, ideally at design stage. Ducts and cabinet locations are cheap to plan and expensive to add later.
Why fibre between buildings instead of network cable?
Copper Ethernet is limited to 100 metres per run and can carry lightning surges between buildings. Non-metallic fibre covers much longer distances and does not conduct electricity, so a storm at one building does not destroy the switch at the other.
Single-mode or multimode fibre?
Single-mode handles long distances and higher future speeds, and is the common choice for site backbones. Multimode can suit shorter runs inside a building. The modules at each end must match the fibre you choose.
Can a wireless link replace fibre?
For one or two hard-to-reach buildings, yes. For the main backbone, fibre is more reliable and is not affected by weather, trees or new buildings in the way.
How do we keep the network running during power cuts?
Put a UPS in every cabinet with active equipment, sized for the time your generator takes to start and stabilise, with margin. A core-only UPS leaves the buildings dark.
Does each building need its own internet connection?
Usually not. One or two connections at the core, shared over the backbone, are easier to manage and secure.
Do we need a fibre ring?
Only where an outage is costly, such as a hospital or a large resort. A ring needs switches with loop protection configured; a simple star is fine for many sites.
Planning a Fibre Optic Installation?
From links between buildings to fibre backbones inside them, we plan the route, terminate and test every core.
Ask for clarification, tell us a problem this did not solve, or suggest a topic. An engineer reads every message, and we use them to improve the Knowledge Center.
BookBook a consultationPick a time to talk through your project.
Call us+255 674 020223
WhatsAppChat with our team.
Emailinfo@extrion.co.tz
PayPay withBank and mobile money detailsPBZ Bank 045 195 9000Mixx by Yas +255 674 020 223Lipa Namba 16172192
Find usKiembesamaki, Zanzibar
Ask Extrion
Engineers reply Mon – Fri, 08:00 – 17:00
End this chat?
We'll send a copy of the conversation to our team. Next time, the chat starts fresh.
online nowPeople browsing Extrion Tech right now
Privacy by design
A few cookies, only with your say-so
We use essential cookies to keep this website secure and working. With your permission we also remember your preferences and play embedded videos. No advertising trackers, ever. Read our cookie notice